upgrade http-server to latest version to avoid security issue

[arthurgeek]

Hi!

The http-server version used by web depends on a very old version of ecstatic. This package is no longer maintained and newer versions of http-server have already removed that dependency. That version also contains a known security problem.

I tried doing it myself and open a PR, but I'm very confused about the way dependencies are managed inside the NX monorepo since the http-server dependency is listed twice, one in the main package.json and in the web package own package.json file. The contributing guidelines have no mention of this and I couldn't find elsewhere.

[puku0x]

It looks like it was fixed on v13.4.2

#8334